Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Pmj0yB31raieE-WYRbn68_kREGc.roa
File: Pmj0yB31raieE-WYRbn68_kREGc.roa (raw, json)
Hash identifier: dUG5djf9tc7QxFK3Fza4quapuBFSPrr1woUGx0SyiWo=
Subject key identifier: 3E:68:F4:C8:1D:F5:AD:A8:9E:13:E5:98:45:B9:FA:F3:F9:11:10:67
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 018CC425355C7DBC3541C1C02C179E4F4253
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Pmj0yB31raieE-WYRbn68_kREGc.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17782
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:35:5c:7d:bc:35:41:c1:c0:2c:17:9e:4f:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e68f4c81df5ada89e13e59845b9faf3f9111067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:b6:d1:c8:9c:37:43:5e:df:66:1a:fd:ac:
b7:14:5f:b1:8c:00:39:fe:07:15:2a:1b:aa:2d:65:
64:af:cf:8a:1f:d6:af:e2:2f:be:64:a5:fa:6d:1d:
8a:15:d4:89:6f:66:15:6d:62:b1:00:e1:95:ff:a7:
a9:24:ce:ac:2c:4e:ce:c4:f4:56:a9:38:c3:a4:94:
f9:87:04:4e:c1:6a:90:bb:bb:10:84:04:d7:a7:ca:
f4:8a:74:6d:f3:18:70:5a:98:5c:3b:a8:ec:9d:f0:
03:cd:88:4d:55:3f:eb:59:b8:69:1b:44:3e:b7:b3:
bf:fb:4c:44:95:50:9a:35:ab:d2:04:b8:ef:bf:ee:
95:ad:bd:b4:22:62:d5:23:da:5b:57:02:da:c7:ba:
ea:74:4d:07:61:50:52:9a:f1:32:ba:80:13:ae:20:
65:41:09:87:a7:2a:53:97:7c:7c:73:68:38:74:00:
21:f3:64:88:7a:56:6e:0d:e1:a3:4e:5e:90:1c:f2:
79:3d:12:89:93:b8:a0:68:67:e2:0b:e9:77:52:d3:
ad:3b:9d:f0:0d:91:81:92:c6:82:50:52:04:40:c4:
3f:ae:5c:c8:32:fd:85:52:71:ea:42:9a:e8:6e:f1:
71:0c:7a:8d:03:69:cc:65:75:93:78:16:92:4d:ad:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:F4:C8:1D:F5:AD:A8:9E:13:E5:98:45:B9:FA:F3:F9:11:10:67
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Pmj0yB31raieE-WYRbn68_kREGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:1f:ef:3f:c1:71:35:9a:ab:7a:3e:f3:7b:b3:e0:4a:05:15:
95:e3:49:be:c8:2c:7c:3f:e7:46:4b:d0:f6:0d:8b:d6:a1:8c:
ae:5d:4f:ed:7d:41:93:33:84:1b:75:f8:80:34:f2:d7:b8:35:
93:a0:2f:21:f3:47:98:a4:25:3c:26:cc:b7:7d:fe:18:31:36:
24:04:bb:e4:4e:36:4c:f3:2a:7e:c5:06:5d:fa:ba:09:89:ef:
a5:89:77:4e:bd:3b:7c:1c:28:a3:28:db:08:16:42:21:05:6b:
c0:97:e2:0a:4c:99:75:1a:d4:86:39:c2:af:e3:98:d2:f5:3d:
52:2d:aa:b5:3f:29:89:40:3d:72:51:47:63:7f:69:61:df:1a:
14:ff:e2:ba:93:2e:1c:68:9f:de:1d:bb:2d:19:f8:ad:22:4e:
78:d7:b1:14:a5:53:01:58:91:d9:6c:cf:1b:a6:0c:03:ea:30:
84:49:89:3e:4d:3a:01:c4:e6:dd:f2:eb:e7:d3:f4:66:6a:84:
e1:20:ce:46:0c:51:c2:da:30:82:d2:65:61:ec:c1:ea:61:52:
5d:dc:17:2c:aa:c9:e8:8c:7a:96:85:c2:2d:18:40:58:26:fd:
bb:93:93:da:81:4d:93:1e:cd:df:af:f8:ce:87:f8:ad:e5:33:
2b:e5:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:42:57 2024 by rpki-client on console-fra.rpki-client.org